Application Security Engineer

TL;DR

Application Security Engineer (Cybersecurity): Securing applications through static application security testing, web application scanning, and supporting development teams in vulnerability remediation with an accent on secure development practices and automation of security scans. Focus on building and adapting CI/CD pipelines, performing security testing and code reviews, and troubleshooting security issues in a hybrid setup based in Warsaw.

Location: Hybrid, Warsaw, Poland (2 days per week in office)

What you will do

• Provide expertise on secure development practices and frameworks
• Perform security testing and code reviews to strengthen software security
• Onboard applications into security testing tools (OpenText Fortify, Sonatype NexusIQ, Qualys WAS)
• Build or adapt CI/CD pipelines to automate security scans
• Assist development teams with troubleshooting and debugging security issues
• Document recurring issues and update secure coding guidelines

Requirements

• At least 5 years of experience as a Security Engineer or related security role
• Fluency in English and Polish
• Proficiency in at least one programming language (Java, JavaScript/TypeScript, or Python)
• Good understanding of web technologies, architectures, and protocols
• Strong analytical, organizational, and communication skills

Nice to have

• Penetration testing experience